Privacy Policy

Habit Labs Co., Ltd., the operator of Tarot Habit, values user privacy and processes personal information safely in accordance with applicable laws. This policy explains what information is collected, how it is used, and how it is protected.

1. Personal Information We Collect

The Company may collect the following information to provide the service:

During registration and login: email address, name or nickname, and encrypted password.
During service use: MBTI information, selected card deck, counseling questions, reading results, follow-up questions, device identifiers, access environment information, and push tokens.
During customer inquiries: inquiry details and contact information needed for replies.

2. Purpose of Use

The Company uses collected personal information for the following purposes:

User identification and login processing.
Providing counseling and reading services.
Providing optional features such as points, notifications, and settings.
Improving service quality and responding to errors.
Preventing misuse and managing security.
Responding to user inquiries.

3. Retention Period

Unless retention is required by law, the Company destroys personal information without delay after the purpose of use is achieved.
If certain information must be retained under applicable laws, it may be stored for the required period.

4. Third-Party Provision

In principle, the Company does not provide users' personal information to external parties.
Exceptions may apply when required by law or when the user separately consents.

5. Entrustment of Processing

The Company may entrust some work to external vendors within the scope necessary for service operation.
When entrustment occurs, the Company manages and supervises the entrusted party in accordance with applicable laws.

6. User Rights

Users may exercise the following rights regarding their personal information at any time:

Request access.
Request correction.
Request deletion.
Request suspension of processing.

The Company responds sincerely to legitimate requests in accordance with applicable laws.

7. Destruction

Electronic files are deleted using secure methods that make recovery difficult.
Paper documents are destroyed by shredding, incineration, or similar methods.

8. Protection Measures

The Company takes measures such as minimizing access permissions, protecting authentication information, monitoring abnormal access and misuse, and operating internal management procedures.

9. Children's Personal Information

The Company may restrict registration by children under the age of 14 in accordance with applicable laws and service policies.

10. Changes to This Policy

This policy may be revised due to changes in laws, service policies, or operating environments.
Important changes will be announced through in-service notices or separate guidance.

11. Contact

Privacy-related inquiries may be submitted through customer support channels announced by the Company.